Supply chain
β Supply Chain
Louis Vuitton Third-Party Breach (July 2025)
Primary Source βIncident Details
Louis Vuitton says regional data breaches tied to same cyberattack. Luxury fashion giant Louis Vuitton confirmed that breaches impacting customers in the UK, South Korea, and Turkey stem from the same security incident, which is believed to be linked to the ShinyHunters extortion group. Update 7/17/25: Updated story with links to breach notifications for Italy and Sweden as well. Since last week, the retailer has been notifying customers that their info was exposed in a data breach, first in South Korea, then in Turkey, and on Friday in the United Kingdom. After publishing, BleepingComputer learned that notifications also went to customers in Italy and Sweden.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Third-party vendor
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-07-01 Breach occurred
- 2025-07-16 Publicly disclosed